Security Engineer

You will define and improve Offchain's cloud security posture, collaborate across teams to keep operations secure and compliant, design and harden secure infrastructure, automate controls, and shape the company's information security governance program.

Responsibilities

• Design, implement, and improve secure cloud-native architectures and CI/CD pipelines
• Identify risks, enforce best practices, and harden systems across the technology stack
• Automate security controls and educate developers to future-proof against vulnerabilities
• Design and evolve the information security governance and compliance program through policies, standards, procedures, and awareness
• Work with engineering, infrastructure, and product teams to align controls with business objectives and technical realities

Requirements

• 5+ years of experience in a security engineering role
• Mastery of cloud infrastructure, particularly AWS
• Prior experience focusing on infrastructure security and Kubernetes
• Familiarity with secret management tools such as Vault or KMS
• Strong understanding of information security concepts and regulatory frameworks including SOC2, ISO 27001, and NIST CSF
• Experience conducting security design reviews, threat modelling, and security testing
• Excellent written and verbal communication skills

Benefits

• Remote-first global workforce with NY office
• Annual company offsite and team onsites
• Professional reimbursement program for conferences, certifications, and more
• Medical, dental, and vision coverage in the US and some other countries
• 401k retirement plan with company match in the US
• Wellness stipend
• Home office setup and ergonomic equipment program